Run computers with resources and health checks, add settings for bots, workspaces, computers and users

- Computers get CPUs and memory (default 1 CPU, 2 GB), set at creation and
  editable; new resources stop, remove and recreate the container, its home
  dir kept. Every computer container has a docker health check and stays
  "creating" until it passes; only healthy computers are reached, by
  hostname, else by their IP on the network (dev outside docker).
- Docker is required: the app creates the cobble network on startup and
  exits without docker.
- Production container: deploy/run-app-container.sh mounts .env, the data
  dir and the docker socket; the database (DB_DIR), media, computers' homes
  and bun-sqlite's live schema now live on the data volume.
- Settings pages for bots, workspaces, computers and users, sharing list
  components; bots can be deleted; users are created with a password and
  confirmation, edited and deleted through RBAC-gated APIs.
- User types trimmed to super_admin, admin, member, read_only and revoked;
  admins manage members. UserAvatar shows profile photos from the user row.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/hooks/use-live-computers.ts

@@ -0,0 +1,34 @@
+import { useState } from "react";
+import useServerEvent from "@/src/hooks/use-server-event";
+import type { ComputerWithStatus } from "@/src/types";
+
+type Params = {
+    computers: ComputerWithStatus[];
+    /**
+     * Also add computers the list doesn't have yet (one just created), for
+     * a list of every computer the user has.
+     */
+    include_new?: boolean;
+};
+
+/**
+ * A list of computers kept current from `server:computer-updated` (setup
+ * finishing or failing, a container stopping).
+ */
+export default function useLiveComputers({ computers: initial, include_new }: Params) {
+    const [computers, setComputers] = useState(initial);
+
+    useServerEvent({
+        event: "server:computer-updated",
+        onData: (computer: ComputerWithStatus) =>
+            setComputers((prev) =>
+                prev.some((c) => c.id == computer.id)
+                    ? prev.map((c) => (c.id == computer.id ? { ...c, ...computer } : c))
+                    : include_new
+                      ? [...prev, computer]
+                      : prev,
+            ),
+    });
+
+    return { computers, setComputers };
+}